[pmwiki-users] Action to list pages in group

Russell Bailey russell-pmwiki at saberpunk.net
Thu Sep 22 15:34:46 CDT 2005


Jeremy Sproat wrote:

>I like this.  That's pretty clever; I was going to have the javascript
>build the array, but having the server deliver a javascript array
>already formatted is pretty nifty.
>
>  
>
Thanks.

>In order for this to happen, however, you'd have to see some horribly
>mangled page names start to show up first.  One such (un-urlencoded)
>example is:
>
>"]); maliciousCodeHere(); var blah=new Array("
>
>...which would look pretty obvious in the Recent Changes page.
>  
>
I don't even think that's a permitted page name.




More information about the pmwiki-users mailing list